Extracted

• • Target

    ea41dc551fefe7a3cfa880e3e8e37a0a345908fe592f2696e90e9d28a1bc027f

  • Size

    69KB

  • MD5

    7b2ee335980b3278efd44c330e19248d

  • SHA1

    8afa3820c88cf2daee7adfcc851690040c921c30

  • SHA256

    ea41dc551fefe7a3cfa880e3e8e37a0a345908fe592f2696e90e9d28a1bc027f

  • SHA512

    15b0cc4010aabd36738d28a5e379db2a02f50cdb54823cf157ec8d087d66a3fa896d20232785d89f1f4eb96515be1481a5faa9301334535e6b08f88d61d54a6e

  • SSDEEP

    1536:BwtCaJcuVVy4tlbBEztvS86n2cPw/t3dPhPgUN3QivEg:ut/auV84tzEzta8k2cPw/ZdPhPgU5QM

  Score

  10^/10

  berbewbackdoordiscoverypersistence

  • Adds autorun key to be loaded by Explorer.exe on startup

    persistence

  • Berbew

    Berbew is a backdoor written in C++.

    backdoorberbew

  • Berbew family

    berbew

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2